added authorization for pins